House bill seeking government P2P ban gets boost
Tiversa gives House committee 200 new examples of P2P leaks of U.S. secret data
Computerworld - Security firm Tiversa Inc. has provided the House Oversight and Government Reform Committee with more reasons to ban the use of peer-to-peer networks in government -- it recently accessed some 200 sensitive military documents via P2P technology.
The documents include personal data on U.S. troops based overseas, details on sensitive military projects and defense contracts and documents that violate International Traffic in Arms Regulations (ITAR) rules, according to a Tiversa executive. One document contained personal data on dozens of soldiers from the Third Special Forces Group based out of Fort Bragg, N.C., and included the names and ages of their spouses and children.
The House committee had asked Tiversa to try to access such data and submit the results of its efforts as evidence that could be used in the committee's debate on a proposed bill that would ban the use of P2P technology on government networks. The request stemmed from a House hearing in July during which Tiversa had disclosed that it found details on safe house locations for the family of President Barack Obama, presidential motorcade routes and other sensitive data on a government P2P network. That followed Tiversa's disclosure that it had unearthed details about the president's helicopter, Marine One, on a server located in Iran. Those details were apparently inadvertently leaked to the Iranian system from a P2P network.
"In an effort to understand the magnitude of P2P risks, and draft appropriate legislation, the committee asked us to provide additional examples following the hearing in July," said Scott Harrer, brand director at Cranberry Township, Pa.-based Tiversa. Over the past month, the company submitted more than 200 additional examples of P2P network data that it has accessed, Harrer said.
Most of the documents found by Tiversa were marked "secret" and appear to include information from all branches of the military, Harrer said. The company has reported on its findings to the Naval Criminal Investigative Service, the Army Criminal Investigation Command and the Air Force Office of Special Investigations, he added. "We have recently seen these files being downloaded in foreign countries, including China and Pakistan," Harrer said. "We have also seen user-issued searches for this type of sensitive data emanating from outside the U.S., so people are in fact actively looking for it."
Tiversa's latest disclosures will likely add to growing concerns about the security of P2P networks.
Numerous others have highlighted similar data leaks as well. In January, Eric Johnson, a professor of operations management at Dartmouth College's Tuck School of Business disclosed that he had found numerous health care documents on P2P networks. For example, Johnson said he found a 1,718-page document containing Social Security numbers, dates of birth, insurance information, treatment codes and other health care data belonging to about 9,000 patients at a medical testing laboratory.
Such leaks typically occur when a user installs a P2P client such as Kazaa, LimeWire, BearShare, Morpheus or FastTrack on a computer for the purpose of sharing songs and other types of files with fellow network users. In many cases, the software is not installed properly and ends up exposing not just the files that the user wants to share, but also every other file on his computer.
A bill that would make it illegal for P2P developers to make software that causes files to be inadvertently shared over a P2P network without a user's knowledge was passed by the House Energy and Commerce Committee last week. The so-called Informed P2P User Act would also require developers to clearly inform users about files that are being made available for searching and sharing, and it would mandate that a user agree to the file-sharing first.
Read more about Government IT in Computerworld's Government IT Topic Center.
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
If you use ‘password,’ one the worst passwords, as your password, fail to keep antivirus protection updated and don’t bother to deploy security patches to close critical vulnerabilities, then maybe you should consider working for the cybersecurity-clueless federal government; you’d fit right in, according to Senator Tom Coburn's cybersecurity and critical infrastructure report.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Changing the Way Government Works: Four Technology Trends that Drive Down Costs and Increase Productivity
- This paper discusses four technology-based approaches to improving processes and increasing
productivity while driving down department and agency costs.
- Is Your Big Data Solution Production-Ready?
- Read "Is Your Big Data Solution Production-Ready?" now, and discover best practices and actionable steps to implementing a production-ready big data solution.
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses
- IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center
- IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Simplify and Consolidate Data Protection for Better Business Results
- Learn about IBM® Tivoli® Storage Manager Operations Center, which provides advanced visualization, built-in analytics and integrated workflow automation features that leapfrog traditional backup... All Government IT White Papers
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have.
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,...
- Getting Ready for BlackBerry Enterprise Service 10.2 Find out how BlackBerry® Enterprise Service 10 helps organizations address the full spectrum of EMM challenges, while balancing the needs of both the...
- Containerization Options: How to Choose the Best DLP Solution for Your Organization This webcast outlines a framework for making the right choice when it comes to containerization approaches, along with the pros and cons of...
- All Government IT Webcasts